Hide user guid header from client

* X-USER-GUID can be used in nginx access logs Consumption in nginx conf: 'user_guid=$upstream_http_x_user_guid' Co-authored-by: Philipp Thun <[email protected]>
cloudfoundry · Mar 25, 2021 · ebdf749 · ebdf749
1 parent 863e5fa
commit ebdf749
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/jobs/cloud_controller_ng/templates/nginx.conf.erb b/jobs/cloud_controller_ng/templates/nginx.conf.erb
@@ -21,6 +21,8 @@ http {
   access_log  /var/vcap/sys/log/cloud_controller_ng/nginx-access.log main;
   access_log  syslog:server=127.0.0.1,severity=info,tag=vcap_nginx_access main;
 
+  proxy_hide_header X-USER-GUID;  #user guid header should not be forwarded to client
+
   sendfile             on;  #enable use of sendfile()
   sendfile_max_chunk   1M;  #make sure not to block on fast clients reading large files
   tcp_nopush           on;